Skip to content

chore(deps): bump the semantic-release-dependencies group across 1 directory with 2 updates#448

Merged
duncdrum merged 1 commit into
masterfrom
dependabot/npm_and_yarn/semantic-release-dependencies-3aa1af1665
Jul 18, 2026
Merged

chore(deps): bump the semantic-release-dependencies group across 1 directory with 2 updates#448
duncdrum merged 1 commit into
masterfrom
dependabot/npm_and_yarn/semantic-release-dependencies-3aa1af1665

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the semantic-release-dependencies group with 2 updates in the / directory: conventional-changelog-conventionalcommits and semantic-release.

Updates conventional-changelog-conventionalcommits from 9.3.1 to 10.2.1

Release notes

Sourced from conventional-changelog-conventionalcommits's releases.

conventional-changelog-conventionalcommits: v10.2.1

Bug Fixes

  • point package homepages and docs to documentation website (04796e2)

conventional-changelog-conventionalcommits: v10.2.0

Features

conventional-changelog-conventionalcommits: v10.1.0

Features

conventional-changelog-conventionalcommits: v10.0.0

⚠ BREAKING CHANGES

  • the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

  • Handlebars template strings and partial files were replaced with render functions.
  • packages now require Node.js 22 or newer.

Features

Bug Fixes

Changelog

Sourced from conventional-changelog-conventionalcommits's changelog.

10.2.1 (2026-07-04)

Bug Fixes

  • point package homepages and docs to documentation website (04796e2)

10.2.0 (2026-06-27)

Features

10.1.0 (2026-06-27)

Features

10.0.0 (2026-06-26)

⚠ BREAKING CHANGES

  • the commit type effect property replaces the hidden commit type property and the bumpStrict preset option for controlling changelog visibility and version bumps.

Fixes #1476.

  • Handlebars template strings and partial files were replaced with render functions.
  • packages now require Node.js 22 or newer.

Features

Bug Fixes

Commits
  • b82a462 chore(release): monorepo release (#1500)
  • 04796e2 fix: point package homepages and docs to documentation website
  • 69b0d36 chore(release): monorepo release (#1492)
  • e93dbe4 feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
  • f72f5e2 chore(release): monorepo release (#1490)
  • 7d9794f feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...
  • ed9862d chore(release): monorepo release (#1474)
  • dc78285 fix(conventional-changelog-angular,conventional-changelog-conventionalcommits...
  • f9195d5 fix(conventional-commits-parser,template): keep footers out of breaking notes...
  • 78761ae feat(conventional-changelog-conventionalcommits)!: support commit type effect...
  • Additional commits viewable in compare view

Updates semantic-release from 25.0.5 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)
Commits
  • 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
  • 0a60004 fix: handle potential null values in commit message and gitTags trimming
  • f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
  • 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
  • 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
  • fc9382c docs: fix issue template links (#4251)
  • e34c52d ci(action): update actions/setup-node action to v7 (#4250)
  • 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
  • 956baf4 chore(deps): update npm to v12.0.1 (#4247)
  • c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 13, 2026
…rectory with 2 updates

Bumps the semantic-release-dependencies group with 2 updates in the / directory: [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) and [semantic-release](https://github.com/semantic-release/semantic-release).


Updates `conventional-changelog-conventionalcommits` from 9.3.1 to 10.2.1
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v10.2.1/packages/conventional-changelog-conventionalcommits)

Updates `semantic-release` from 25.0.5 to 25.0.8
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.5...v25.0.8)

---
updated-dependencies:
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 10.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: semantic-release-dependencies
- dependency-name: semantic-release
  dependency-version: 25.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: semantic-release-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-dependencies-3aa1af1665 branch from 073f9d4 to 4b5fd32 Compare July 18, 2026 11:01
@duncdrum
duncdrum merged commit 303b222 into master Jul 18, 2026
10 of 11 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/semantic-release-dependencies-3aa1af1665 branch July 18, 2026 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant